DIGITAL SECURITY - SOC Services
Zensar · Pune
Collected role description
SOC Analyst L1 (Level 1) - Security Monitoring Analyst Experience: 1-3 Years Role Summary The SOC L1 Analyst is the first line of defense responsible for continuous security monitoring, alert triage, incident identification, and initial response activities. Key Responsibilities Monitor SIEM dashboards and security tools 24x7. Review and triage security alerts and events. Perform initial investigation of security incidents. Escalate incidents to L2/L3 teams based on severity. Monitor EDR, DLP, IDS/IPS, Email Security, Firewalls, and Proxy alerts. Execute predefined incident response procedures. Validate false positives and document findings. Create and maintain incident tickets. Generate daily and weekly security reports. Support compliance and audit activities. Skills Required SIEM: Microsoft Sentinel, Splunk, QRadar, ArcSight EDR: CrowdStrike, Defender for Endpoint, SentinelOne Basic Networking (TCP/IP, DNS, HTTP, HTTPS) Windows/Linux fundamentals Incident Management MITRE ATT&CK fundamentals Security monitoring concepts Certifications Preferred Security+ SC-200 CEH (Associate Level) SOC Analyst L1 (Level 1) - Security Monitoring Analyst Experience: 1-3 Years Role Summary The SOC L1 Analyst is the first line of defense responsible for continuous security monitoring, alert triage, incident identification, and initial response activities.
Key Responsibilities
- Monitor SIEM dashboards and security tools 24x7.
- Review and triage security alerts and events.
- Perform initial investigation of security incidents.
- Escalate incidents to L2/L3 teams based on severity.
- Monitor EDR, DLP, IDS/IPS, Email Security, Firewalls, and Proxy alerts.
- Execute predefined incident response procedures.
- Validate false positives and document findings.
- Create and maintain incident tickets.
- Generate daily and weekly security reports.
- Support compliance and audit activities.
Skills Required
- SIEM: Microsoft Sentinel, Splunk, QRadar, ArcSight
- EDR: CrowdStrike, Defender for Endpoint, SentinelOne
- Basic Networking (TCP/IP, DNS, HTTP, HTTPS)
- Windows/Linux fundamentals
- Inciden
Collected experience requirement
5-10 years